Show Table of Contents
5.5. Modifying the Attribute List
By default, the Referential Integrity plug-in is set up to check for and update the
member
, uniquemember
, owner
, and seeAlso
attributes. You can add or delete attributes to be updated using the command line or the Console.
Note
Attributes set in the Referential Integrity plug-in's parameter list, must have equality indexing on all databases. Otherwise, the plug-in scans every entry of the database for matching the deleted or modified DN. This can have a significant performance impact. For details about checking and creating indexes, see Section 13.2, “Creating Standard Indexes”.
5.5.1. Modifying the Attribute List Using the Console
- Open the Property Editor in the Referential Integrity Postoperation plug-in's configuration. For details, see Section 1.9.3.2, “Configuring Plug-ins using the Console”.
- Update the attributes in the
referint-membership-attr
attribute.You can add additional values or delete existing ones using theand buttons. - Restart the Directory Server instance. See Section 1.4.2, “Starting and Stopping a Directory Server Instance Using the Console”.
5.5.2. Configuring the Attribute List from the Command Line
- Update the attribute list:
- To add an additional attribute that should be checked and updated by the plug-in:
# ldapmodify -D "cn=Directory Manager" -W -x dn: cn=referential integrity postoperation,cn=plugins,cn=config add: referint-membership-attr referint-membership-attr: attribute_name
- To delete an attribute that should no longer be checked and updated by the plug-in:
# ldapmodify -D "cn=Directory Manager" -W -x dn: cn=referential integrity postoperation,cn=plugins,cn=config delete: referint-membership-attr referint-membership-attr: attribute_name
- Restart the Directory Server instance:
# systemctl restart dirsrv@instance_name